Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

saltstack salt 2016.3.4 vulnerabilities and exploits

(subscribe to this query)
578
VMScore
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt prior to 2015.8.13, 2016.3.x prior to 2016.3.5, and 2016.11.x prior to 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.
Saltstack Salt 2016.3.3Saltstack SaltSaltstack Salt 2016.11.0Saltstack Salt 2016.11.1Saltstack Salt 2016.11.2Saltstack Salt 2016.3.0Saltstack Salt 2016.3.1Saltstack Salt 2016.3.2Saltstack Salt 2016.3.4
801
VMScore
CVE-2017-5200
Salt-api in SaltStack Salt prior to 2015.8.13, 2016.3.x prior to 2016.3.5, and 2016.11.x prior to 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
Saltstack Salt 2016.11.0Saltstack Salt 2016.3.4Saltstack Salt 2016.11.2Saltstack Salt 2016.3.0Saltstack Salt 2016.3.1Saltstack Salt 2016.3.2Saltstack Salt 2016.11.1Saltstack Salt 2016.3.3Saltstack Salt
668
VMScore
CVE-2020-16846
An issue exists in SaltStack Salt up to and including 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
Saltstack Salt 3001Saltstack SaltDebian Debian Linux 9.0Debian Debian Linux 10.0
668
VMScore
CVE-2021-25281
An issue exists in through SaltStack Salt prior to 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.
Saltstack SaltFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671unauthorizedCVE-2024-4776CVE-2024-3407CVE-2024-26026CVE-2024-32888wirelessCVE-2024-4656template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook